This policy explains what information the Ember Browser app ("Ember", "we") handles, why, and the choices you have. It applies to the app as distributed on Google Play.
In short
Ember has no accounts and no analytics.
Your history, bookmarks, tabs and passwords are stored only on your phone. We never receive them.
Crash reports are off unless you turn them on.
Ember shows one non-personalised ad, from Google AdMob, on the new-tab page. Ads never appear on websites or in incognito, and Ember never tells AdMob what you browse or search.
To check for updates, Ember asks Google Firebase Remote Config which versions are current. That request never includes the pages you visit.
We don't sell or share personal information.
1. Information that stays on your phone
Browsing data: history, bookmarks, favorites, open tabs, downloads list, cookies and site data.
Saved passwords, encrypted with a key held in Android's secure hardware keystore.
Settings and tracker-blocking statistics.
None of this is backed up to the cloud or sent to us. The Fire Button deletes tabs, cookies, site data, cache and history. Incognito tabs keep their own storage and save no history.
2. What leaves your phone
Websites you visit receive your requests, as in any browser.
Your chosen search engine receives your searches. If search suggestions are on, it also receives what you type in the address bar. Suggestions are never requested in incognito tabs.
Android System WebView, which Ember uses to show pages, may check pages against Google Safe Browsing using shortened hashes of addresses.
Voice search uses your phone's speech recognition service.
3. Information collected by Google services
Service
What it collects
When and why
Firebase Remote Config
The app version, a random Firebase installation identifier, and your phone's language and country.
Each time Ember opens, at most about once an hour, to check whether this version still works or a newer one is available. It never includes the pages you visit or anything you type.
Firebase Crashlytics
The error and stack trace, app version, device model, Android version and a random installation identifier.
Only if you turn on crash reports in Settings, so we can find and fix crashes. Reports don't contain the pages you visit.
Google AdMob
Your IP address, device and app information (such as model, Android version and app version), an app-specific identifier, and how you interact with the ad. AdMob may also use cookies.
When the new-tab page shows its banner ad, to deliver the ad, measure it and prevent fraud. Ads are always non-personalised: Ember doesn't use your advertising ID and never tells AdMob which pages you visit or what you search for.
Google processes this information under the Google Privacy Policy. It is sent encrypted and may be stored on servers outside your country.
4. Ads
Ember is free and shows a single banner ad at the bottom of the regular new-tab page. There are no ads on websites, in incognito tabs, or anywhere else in the app.
Ads are served by Google AdMob and are always non-personalised, meaning they are chosen from general context rather than a profile of you.
In regions where the law requires consent, such as the European Economic Area and the UK, Ember asks before any ad is loaded. You can change your choice at any time in Settings › Ad privacy choices.
Ember's tracker blocking still applies to every website you visit. The ad is shown by Google's own component inside the app and doesn't see your browsing.
5. App Tracking Protection
This feature is optional. It uses Android's VPN feature locally on your phone:
Only DNS lookups pass through it.
Lookups of known tracker domains are refused.
Other lookups go to your network's usual DNS server, or to Quad9 if your network doesn't report one.
No traffic is sent to us, and ads in other apps aren't blocked or changed. A record of which apps tried to contact trackers is kept on your phone for 7 days so you can see it.
6. Permissions
Permission
Why it is used
Internet
To load websites and for the services in section 3.
Microphone
When you tap voice search, or when a website asks to use it and you allow it.
Camera and location
Only when a website asks for them, for example a video call or a map, and you allow it for that site. Ember passes them to the website and does not store them.
Notifications
To show downloads, an open incognito session, and App Tracking Protection status.
VPN service
Only if you turn on App Tracking Protection (section 5).
Biometrics
Only if you turn on App lock, or to unlock saved passwords. Android checks your fingerprint, face or screen lock; Ember never receives your biometric data.
7. Your choices and deleting your data
Erase browsing data: use the Fire Button, or set Ember to clear everything when you leave the app.
Saved passwords: delete them in Settings › Passwords.
Crash reports: turn them off at any time in Settings.
Ads consent: where it applies, change it in Settings › Ad privacy choices.
Remove everything: uninstalling Ember deletes everything it stored on your phone, including its installation identifier.
Questions about data Google holds for these services: email sreedhu0714@gmail.com with the subject "Ember Browser data request". We reply within 30 days.
8. Children
Ember is a general-purpose browser. It is not directed at children under 13, and we do not knowingly collect personal information from children.
9. Changes
If this policy changes, the updated version will be published at this address with a new effective date.